$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/430c2e95-985d-3184-99ab-b41d0a7da738.roa File: 430c2e95-985d-3184-99ab-b41d0a7da738.roa (raw, json) Hash identifier: FYR/9ISxLM+hynfjuoFGe6E+s0dNi8rL3xsdX6gykgI= Subject key identifier: 16:4C:08:C4:F4:25:87:65:91:BE:00:DA:D2:7B:E8:63:0E:2D:6C:F9 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858489E6B70243E0ECB95E3594780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/430c2e95-985d-3184-99ab-b41d0a7da738.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22773 IP address blocks: 68.225.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:70:24:3e:0e:cb:95:e3:59:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3fecaabc-51b2-43a9-9030-535342efd925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1c:ed:b7:a4:15:71:ea:c3:bd:e1:60:e6:ed: d0:1d:31:bc:c8:0c:aa:0a:fa:0b:24:23:88:81:93: c1:3b:45:80:d0:d2:6a:16:e4:8a:82:05:c1:5e:0f: 24:80:7b:0a:61:57:2c:1e:b8:16:77:51:46:fb:69: 5c:2f:62:16:e8:d0:27:6e:f0:d4:b6:70:32:e1:61: 25:6e:6b:67:93:e2:32:74:f3:b2:57:60:60:0e:9b: 29:ca:31:39:dc:80:b5:87:48:a7:37:71:fa:28:2c: c6:0f:9d:e6:0a:0f:96:08:83:95:9f:dd:4a:34:f0: 21:25:aa:11:01:2f:16:b1:73:23:80:59:5b:3f:2e: 22:ce:39:9e:6d:c9:26:a9:c0:e8:fd:83:32:02:93: 2d:00:5b:88:f5:e3:a6:f1:56:98:53:98:a1:de:50: 0c:ca:d0:2f:d0:f5:93:94:ff:4a:e0:33:60:75:cd: 9e:d7:c5:3a:ea:e7:89:57:49:d3:c0:09:fb:e5:39: e3:da:dd:60:a7:86:8a:b6:23:52:19:c3:62:02:cd: 9f:7f:14:3d:eb:a1:ef:ff:b8:fc:18:b9:33:25:fb: 9a:3d:14:40:5e:30:39:ba:28:10:e9:24:f3:4a:d6: 1a:a5:05:79:22:cb:08:e7:30:f4:d0:81:da:e6:ef: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4C:08:C4:F4:25:87:65:91:BE:00:DA:D2:7B:E8:63:0E:2D:6C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/430c2e95-985d-3184-99ab-b41d0a7da738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6a:36:30:73:f3:ab:74:6a:7d:46:be:1e:a9:56:e7:ba:ec: 1d:c6:78:63:03:c8:12:44:66:47:ae:a6:b3:3e:4c:12:5a:08: f0:86:f8:5f:fa:ac:5d:e7:65:82:28:ff:39:53:29:17:cd:04: 33:2f:33:a3:6d:65:d5:96:e1:fd:50:9d:82:f1:c6:12:89:a2: a3:7c:85:86:c4:d0:22:51:b5:66:2b:50:23:84:71:8c:1d:e0: 31:12:68:ef:b1:55:5b:0c:25:cf:50:15:46:ef:96:53:ff:61: 30:24:a3:17:e3:d4:72:2d:2d:23:21:52:a1:55:f2:1d:fe:05: 75:0a:7e:2a:55:db:19:c1:b3:fb:e3:61:72:93:4b:e3:51:84: 2e:c2:4e:75:4e:c3:d5:5d:df:6d:09:56:06:03:99:ee:24:4c: 66:85:c7:64:fa:ae:09:3c:35:99:fd:71:9b:12:1e:ad:40:d8: 8f:cc:47:9d:1d:93:23:00:0b:2e:fa:32:1e:28:f3:a3:7f:3a: 86:e2:17:18:61:a3:24:6a:e2:ff:ed:bd:12:2f:c8:63:9d:da: f8:a2:d6:5a:82:5a:23:1e:03:e7:de:95:57:a6:d8:6d:59:67: f8:68:c6:bc:ca:a0:52:28:fb:bd:47:75:c2:6c:f1:c1:c0:38: cb:c4:1b:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea3AkPg7LleNZR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2ZlY2FhYmMtNTFiMi00M2E5LTkwMzAtNTM1MzQyZWZkOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBztt6QVcerDveFg5u3QHTG8yAyqCvoLJCOI gZPBO0WA0NJqFuSKggXBXg8kgHsKYVcsHrgWd1FG+2lcL2IW6NAnbvDUtnAy4WEl bmtnk+IydPOyV2BgDpspyjE53IC1h0inN3H6KCzGD53mCg+WCIOVn91KNPAhJaoR AS8WsXMjgFlbPy4izjmebckmqcDo/YMyApMtAFuI9eOm8VaYU5ih3lAMytAv0PWT lP9K4DNgdc2e18U66ueJV0nTwAn75Tnj2t1gp4aKtiNSGcNiAs2ffxQ966Hv/7j8 GLkzJfuaPRRAXjA5uigQ6STzStYapQV5IssI5zD00IHa5u+2wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZMCMT0JYdlkb4A2tJ76GMOLWz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDMwYzJlOTUtOTg1ZC0z MTg0LTk5YWItYjQxZDBhN2RhNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRqNjBz86t0an1Gvh6pVue67B3GeGMDyBJEZkeuprM+TBJaCPCG+F/6 rF3nZYIo/zlTKRfNBDMvM6NtZdWW4f1QnYLxxhKJoqN8hYbE0CJRtWYrUCOEcYwd 4DESaO+xVVsMJc9QFUbvllP/YTAkoxfj1HItLSMhUqFV8h3+BXUKfipV2xnBs/vj YXKTS+NRhC7CTnVOw9Vd320JVgYDme4kTGaFx2T6rgk8NZn9cZsSHq1A2I/MR50d kyMACy76Mh4o86N/OobiFxhhoyRq4v/tvRIvyGOd2vii1lqCWiMeA+felVem2G1Z Z/hoxrzKoFIo+71HdcJs8cHAOMvEG/4= -----END CERTIFICATE-----Generated at Sun Apr 6 16:01:58 2025 by rpki-client